System, device, and method for detection of proxy server
Devices, systems, and methods of detecting whether an electronic device or computerized device or computer, is communicating with a computerized service or a trusted server directly and without an intermediary web-proxy, or indirectly by utilizing a proxy server or web-proxy. The system searches for particular characteristics or attributes, that characterize a proxy-based communication session or channel and that do not characterize a direct non-proxy-based communication session or channel; or conversely, the system searches for particular characteristics or attributes, that characterize a direct non-proxy-based communication session or channel and that do not characterize a proxy-based communication session or channel; and based on these characteristics, determines whether or not a proxy server exists and operates.
1. A system comprising:
a proxy server detector apparatus, able to determine that a proxy server is utilized by an end-user using an end-user device over a communication network for accessing a trusted server;
wherein the proxy server detector apparatus is configured to determine whether: (I) the end-user device is communicating indirectly with the trusted server via the proxy server, or (II) the end-user device is communicating directly with the trusted server via a proxy-less communication route;
wherein the proxy server detector apparatus comprises:
a preferred-language extractor to extract, locally at the end-user device, an identifier of a preferred natural language that is reported locally at the end-user device;
a geo-location mismatch detector, to detect that (I) the preferred natural language as extracted locally at the end-user device, is not an official language of (II) a geographical region associated with an originating Internet Protocol (IP) address associated with the end-user device;
wherein the proxy server detector apparatus determines that said proxy server exists, between the end-user device and the trusted server, based on a determination that (I) the preferred natural language as extracted locally at the end-user device, is not an official language of (II) the geographical region associated with an originating Internet Protocol (IP) address associated with the end-user device.
2. A system comprising:
a proxy server detector apparatus, able to determine that a proxy server is utilized by an end-user using an end-user device over a communication network for accessing a trusted server;
wherein the proxy server detector apparatus is configured to determine whether: (I) the end-user device is communicating indirectly with the trusted server via the proxy server, or (II) the end-user device is communicating directly with the trusted server via a proxy-less communication route;
wherein the proxy server detector apparatus comprises: an HTTP-header duplicator to modify an original HTTP header, that is intended for transmission to the end-user device, into a duplicate HTTP header that comprises two or more duplicate copies of said original HTTP header;
wherein the proxy server detector apparatus perform an evaluation of a response of the end-user device to said duplicate HTTP header, and to determine whether or not a the proxy server exists, between the end-user device and the trusted server, based on said evaluation results;
wherein, if the proxy server detector apparatus evaluates that no error signal was received back from the end-user device in response to the duplicate
HTTP header, then the proxy server detector apparatus is to determine that a proxy server exists;
wherein, if the proxy server detector apparatus evaluates that an error signal was received back from the end-user device in response to the duplicate HTTP header, then the proxy server detector apparatus is to determine that a proxy server does not exist.